Please report a security problem privately, through GitHub's private vulnerability reporting: open this repository's Security tab and choose Report a vulnerability. Please do not open a public issue for it.

In scope: the code in this repository - the pipeline scripts, the GitHub Actions workflows and the site's pages and scripts (for example a way to inject content into scorvec.com, or a workflow that could expose a secret).

Not security issues: errors in the data, figures or forecasts. Open an ordinary issue for those.

This is a personal project maintained by one person: reports are read and answered as time allows, and a fix lands as a normal commit to main.